VYPR
← All advisories
Medium severity6.4NVD Advisory· Published Jun 23, 2026· Updated Jun 25, 2026

CVE-2026-54015

CVE-2026-54015

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI's prompt version-history endpoints authorize the prompt_id in the URL but then act on caller-supplied history IDs without verifying that the history row belongs to that prompt (history_entry.prompt_id == prompt.id). This affects /api/v1/prompts/id/{prompt_id}/history/diff, /api/v1/prompts/id/{prompt_id}/update/version, and /api/v1/prompts/id/{prompt_id}/history/{history_id}. An authenticated user with access to any prompt they control, plus a victim prompt_history.id, can read or delete another user's private prompt history. This vulnerability is fixed in 0.9.6.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
open-webuiPyPI
< 0.9.60.9.6

Affected products

2
  • Openwebui/Open Webui2 versions
    cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*range: <0.9.6
    • (no CPE)range: <0.9.6

Patches

Vulnerability mechanics

References

5

News mentions

1